Jen Easterly, director of the Cybersecurity and Infrastructure Security Agency and a 2024 Wash100 Award recipient, has shared that CISA will develop a national plan that will guide federal initiatives to protect critical infrastructure from cyberthreats.
In a blog post published Wednesday, Easterly said the 2025 National Infrastructure Risk Management Plan will be informed by a new risk management cycle as stated in the National Security Memorandum-22 on Critical Infrastructure Security and Resilience, which the White House issued on April 30.
According to Easterly, the upcoming document will replace the 2013 National Infrastructure Protection Plan and state how the U.S. government will work with partners to detect and manage national risk amid the evolving threat landscape.
“Most importantly, the National Plan will recognize that the U.S. government cannot make all critical infrastructure immune from all threats and hazards,” she wrote.
The 2025 National Plan will outline U.S. government efforts to improve the resilience of critical infrastructure against prioritized risks based on cross-sector risk assessments of CISA and risk assessments of 16 critical infrastructure sectors.
The CISA director said the agency and other federal partners will collaborate with sector risk management agencies to help manage unique sector risks.
Easterly also stressed the importance of insights from state, local, tribal and territorial governments and private sector partners in helping CISA develop and implement the 2025 National Plan.
“We ask that you work with your respective SRMAs through the development of your sector risk assessments and sector risk management plans, as these will be core inputs into the National Plan,” she noted.
Join the Potomac Officers Club’s 2024 Cyber Summit on June 6 to learn more about the latest trends and cyber’s dynamic role in the public sector. Register here.